A system and method for communicating information between a first party and a second party, comprising the steps of receiving, by an intermediary, an identifier of desired information and accounting information for a transaction involving the information from the first party, transmitting an identifier of the first party to the second party, and negotiating, by the intermediary, a comprehension function for obscuring at least a portion of the information communicated between the first party and the second party. The data transmission may be made secure with respect to the intermediary by providing an asymmetric key or direct key exchange for encryption of the communication between the first and second party. The data transmission may be made secure with respect to the second party by maintaining the information in encrypted format at the second party, with the decryption key held only by the intermediary, and transmitting a secure composite of the decryption key and a new encryption key to the second party for transcoding of the data record, and providing the new decryption key to the first party, so that the information transmitted to the first party can be comprehended by it.

System and method for secure three-party communications

A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.

Secure data parser method and system

This paper presents a state-of-the-art review of error-correcting codes for computer semiconductor memory applications. The construction of four classes of error-correcting codes appropriate for semiconductor memory designs is described, and for each class of codes the number of check bits required for commonly used data lengths is provided. The implementation aspects of error correction and error detection are also discussed, and certain algorithms useful in extending the error-correcting capability for the correction of soft errors such as α-particle-induced errors are examined in some detail.

Error-correcting codes for semiconductor memory applications: a state-of-the-art review

A banking transaction processing system includes customer stations and at least one server provider station. The customer stations include automated banking machines. Each automated banking machine includes a card reader that reads indicia on user cards corresponding to financial accounts. Each automated banking machine also includes a cash dispenser. Service providers at service provider stations are enabled to communicate with customers at automated banking machines to help carry out transactions. Customers at automated banking machines may also carry out banking transactions without the involvement of service providers. Pneumatic tube transport systems may be used for moving items between local service providers and customers. In some embodiments, computers operating facial image transformation software and vocal sound transformation software enable outputs at customer stations which correspond to facial images and vocal sounds that customers may find more acceptable than those produced by the actual service provider.

Automated banking machine system and method

The present invention provides a system to ensure security of data in a computer network system A center certifies a public-key of user of the system and distributes a secret-key A first system comprises the center in a network, an information provider and a plurality of users The center identifies utilization status by requests of the secret-key The data is encrypted by the secret-key and is stored and transferred, while the data to be stored and transferred is encrypted by a secret-key different from the secret-key of the transferred data An original data label is added to the original data, and an edit label is added to the edited data, and the center does not store the data and stores only the original data label and the edit label A second system comprises a center and an information provider in a network, and a plurality of users utilizing the network The center stores the original data and editing scenario, and also the original data label, user label and edit label The data is not transferred between the users, but data label encrypted by the public-key is transferred In electronic commerce system, every data is distributed through a mediator in the network, data which is transferred from a maker to a user is encrypted by a secret-key for encryption, and data which is transferred from the user to the maker is encrypted by a secret-key for re-encryption

Data management system

The disclosure provides an embedded hardware/software monitor for a data processing system. It embeds and distributes a plurality of instrumentation table units (ITUs) within various hardware entities in the system to collect sampled hardware signals local in the hardware entity in which the respective ITU is embedded, e.g. in each CPU, I/O processor, system controller, main storage controller, etc. Instrumentation measurement is controlled centrally in the system. Sampling of the system signals is done periodically at a low-rate relative to the CPU machine cycle rate, and the sampled signal are collected in the ITUs for instrumentation analysis. Sampling pulses are synchronously provided in all ITUs in the system. The ITU collected hardware signals are related to software controlled trace entries made in a trace table (TT) in main storage by each CPU in the system executing tracing and other predetermined instructions. An asynchronous relationship between the TT entries and the ITU entries is bridged by the intervening table, called SAT, located in storage. The SAT entries receive time-of-day (TOD) values also found in associated TT entries to relate them.

Internally distributed monitoring system

The invention is an apparatus and method for validating that key management functions requested for a cryptographic key by the program have been authorized by the originator of the key. The invention includes a cryptographic facility characterized by a secure boundary through which passes an input path for receiving the cryptographic service requests, cryptographic keys and their associated control vectors, and an output path for providing responses thereto. There can be included within the boundary a cryptographic instruction storage coupled to the input path, a control vector checking unit and a cryptographic processing unit coupled to the instruction storage, and a master key storage coupled to the processing means, for providing a secure location for executing key management functions in response to the received service requests. The cryptographic instruction storage receives over the input path a cryptographic service request for performing a key management function on a cryptographic key. The control vector checking unit has an input coupled to the input path for receiving a control vector associated with the cryptographic key and an input connected to the cryptographic instruction storage, for receiving control signals to initiate checking that the control vector authorizes the key management function which is requested by the cryptographic service request. The control vector checking unit has an authorization output connected to an input of the cryptographic processing means, for signalling that the key management function is authorized, the receipt of which by the cryptographic processing unit initiates the performance of the requested key management function with the cryptographic key. The invention enables the flexible control of many cryptographic key management functions in the generation, distribution and use of cryptographic keys, while maintaining a high security standard.

Secure management of keys using control vectors

Data cryptography is achieved in an improved manner by associating with the data cryptography key, a control vector which provides the authorization for the uses of the key intended by the originator of the key. Among the uses specified by the control vector are limitations on encryption, decryption, authentication code generation and verification, translation of the user's data. Complex combinations of data manipulation functions are possible using the control vectors, in accordance with the invention. The system administrator can exercise flexibility in changing the implementation of his security policy by selecting appropriate control vectors in accordance with the invention. Complex scenarios such as encrypted mail box, session protection, file protection, ciphertext translation center, peer-to-peer ciphertext translation, message authentication, message authentication with non-repudiation and many others can be easily implemented by a system designer using the control vectors, in accordance with the invention.

Data cryptography operations using control vectors

Data cryptography is achieved in an improved manner by associating with the 
data cryptography key, a control vector which provides the authorisation for 
the uses of the key intended by the originator of the key. Among the uses 
specified by the control vector are limitations on encryption, decryption, 
authentication code generation and verification, translation of the user's 
data. Complex combinations of data manipulation functions are possible 
using the control vectors, in accordance with the invention. The system 
administrator can exercise flexibility in changing the implementation of his 
security policy by selecting appropriate control vectors in accordance with 
the invention. Complex scenarios such as encrypted mail box, session 
protection, file protection, ciphertext translation centre, peer-to-peer 
ciphertext translation, message authentication, message authentication with 
non-repudiation and many others can be easily implemented by a system 
designer using the control vectors, in accordance with the invention.

Data cryptography using control vectors

A system and method for preventing deadlock in a multiprocessor computer system executing instructions requiring multiple resources. The system detects potential deadlock situations where a multi-resource instruction is blocked from obtaining one of the resources. A multi-resource instruction global lock is provided that can be held by at most one processor. Upon conflict detection, the processor attempts to acquire the multi-resource instruction global lock and, if successful, resumes resource acquisition. The use of a global lock serializes multiple resource requests and assures that the processor holding the lock can eventually acquire all required resources without deadlock with another processor. The preferred embodiment acquires the global lock on an exception basis to minimize the overhead impact. However, an alternate embodiment which uses the global lock in each multiple resource instruction could also be implemented. Synonym detection logic is provided to detect the situation where a conflict is caused by address resolution to a synonymous lock by the processor.

Julian Thomas

Papers

Internally distributed monitoring system

Secure management of keys using control vectors

Data cryptography operations using control vectors

Data cryptography using control vectors

System and method for preventing deadlock in multiprocessor multiple resource instructions